setup session when login is performed